Medical Corporation Not Responsible for Unauthorized Disclosure of Medical Information by Employee Acting Outside the Scope of Employment

In a full-fledged opinion by Judge Pigott, over a dissent, the Court of Appeals answered a certified question from the Second Circuit in the negative.  The question was: “Whether, under New York law, the common law right of action for breach of the fiduciary duty of confidentiality for the unauthorized disclosure of medical information may run directly against medical corporations, even when the employee responsible for the breach is not a physician and acts outside the scope of her employment?”:

… [A] medical corporation's duty of safekeeping a patient's confidential medical information is limited to those risks that are reasonably foreseeable and to actions within the scope of employment.  Doe v Guthrie Clinic Ltd, 224, CtApp 1-9-14